Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. 2026/07/27 06:18:34 parsed 1 programs 2026/07/27 06:18:34 serving rpc on tcp://34647 [ 84.298660][ T5604] cgroup: Unknown subsys name 'net' [ 84.539259][ T5604] cgroup: Unknown subsys name 'cpuset' [ 84.595405][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.300107][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.728582][ T10] cfg80211: failed to load regulatory.db [ 91.309273][ T5647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.310612][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.311277][ T5647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.312428][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.313345][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.949236][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.949261][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.087335][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.087363][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.066022][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.066640][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.066856][ T5672] bridge_slave_0: entered allmulticast mode [ 94.070786][ T5672] bridge_slave_0: entered promiscuous mode [ 94.106261][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.106465][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.106640][ T5672] bridge_slave_1: entered allmulticast mode [ 94.108461][ T5672] bridge_slave_1: entered promiscuous mode [ 94.411468][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.416731][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.458786][ T5672] team0: Port device team_slave_0 added [ 94.461648][ T5672] team0: Port device team_slave_1 added [ 94.577014][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.577030][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.577043][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.580237][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.580245][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.580258][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.871383][ T5672] hsr_slave_0: entered promiscuous mode [ 94.872764][ T5672] hsr_slave_1: entered promiscuous mode [ 95.159527][ T5672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.200883][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.213391][ T5672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.249067][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.440248][ T5672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.521197][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.524028][ T5672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.566785][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.770465][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.880062][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.892290][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.892558][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.923382][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.923520][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.410081][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.523922][ T5672] veth0_vlan: entered promiscuous mode [ 96.550824][ T5672] veth1_vlan: entered promiscuous mode [ 96.638191][ T5672] veth0_macvtap: entered promiscuous mode [ 96.653855][ T5672] veth1_macvtap: entered promiscuous mode [ 96.709543][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.733096][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.764817][ T4244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.769949][ T4244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.770812][ T4244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.804390][ T4244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.605389][ T4245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.270684][ T4245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.817222][ T4245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/27 06:18:51 executed programs: 0 [ 99.040199][ T4910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.076560][ T4910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.077688][ T4910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.078790][ T4910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.079571][ T4910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.263568][ T4245] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.177232][ T4245] bridge_slave_1: left allmulticast mode [ 100.177363][ T4245] bridge_slave_1: left promiscuous mode [ 100.178960][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.386711][ T4245] bridge_slave_0: left allmulticast mode [ 100.386745][ T4245] bridge_slave_0: left promiscuous mode [ 100.387003][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.117779][ T4910] Bluetooth: hci0: command tx timeout [ 101.175669][ T4245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.235888][ T4245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.256931][ T4245] bond0 (unregistering): Released all slaves [ 101.298464][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 101.685647][ T4245] hsr_slave_0: left promiscuous mode [ 101.725099][ T4245] hsr_slave_1: left promiscuous mode [ 101.726942][ T4245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.727102][ T4245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.767080][ T4245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.767106][ T4245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.846214][ T4245] veth1_macvtap: left promiscuous mode [ 101.846388][ T4245] veth0_macvtap: left promiscuous mode [ 101.846569][ T4245] veth1_vlan: left promiscuous mode [ 101.846781][ T4245] veth0_vlan: left promiscuous mode [ 102.496198][ T4245] team0 (unregistering): Port device team_slave_1 removed [ 102.545571][ T4245] team0 (unregistering): Port device team_slave_0 removed [ 102.708946][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.709175][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.709351][ T5727] bridge_slave_0: entered allmulticast mode [ 102.711246][ T5727] bridge_slave_0: entered promiscuous mode [ 102.721905][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.723963][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.724264][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.724531][ T5727] bridge_slave_1: entered allmulticast mode [ 102.730152][ T5727] bridge_slave_1: entered promiscuous mode [ 102.817084][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.834448][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.881856][ T5727] team0: Port device team_slave_0 added [ 102.889971][ T5727] team0: Port device team_slave_1 added [ 102.932392][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.932408][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.932432][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.937224][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.937238][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.937263][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.050616][ T5727] hsr_slave_0: entered promiscuous mode [ 103.052958][ T5727] hsr_slave_1: entered promiscuous mode [ 103.195157][ T4910] Bluetooth: hci0: command tx timeout [ 103.594015][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 105.275024][ T4910] Bluetooth: hci0: command tx timeout [ 105.618850][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.654721][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.670284][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.723388][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.724403][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.778507][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.780388][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.812574][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.139644][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.179359][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.205186][ T1853] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.205431][ T1853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.244143][ T1853] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.247925][ T1853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.954573][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.031780][ T5727] veth0_vlan: entered promiscuous mode [ 107.052559][ T5727] veth1_vlan: entered promiscuous mode [ 107.093920][ T5727] veth0_macvtap: entered promiscuous mode [ 107.102508][ T5727] veth1_macvtap: entered promiscuous mode [ 107.129953][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.153825][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.172005][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.174817][ T1853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.194361][ T1853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.204161][ T1853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.355365][ T4910] Bluetooth: hci0: command tx timeout [ 107.603982][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.604002][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.653680][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.653700][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/27 06:19:00 executed programs: 2 [ 107.898677][ T5887] [ 107.898685][ T5887] ====================================================== [ 107.898689][ T5887] WARNING: possible circular locking dependency detected [ 107.898700][ T5887] syzkaller #0 Not tainted [ 107.898705][ T5887] ------------------------------------------------------ [ 107.898708][ T5887] syz.0.18/5887 is trying to acquire lock: [ 107.898714][ T5887] ffff8880230491b0 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0x153/0x420 [ 107.898749][ T5887] [ 107.898749][ T5887] but task is already holding lock: [ 107.898752][ T5887] ffff888035079910 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590 [ 107.898777][ T5887] [ 107.898777][ T5887] which lock already depends on the new lock. [ 107.898777][ T5887] [ 107.898780][ T5887] [ 107.898780][ T5887] the existing dependency chain (in reverse order) is: [ 107.898784][ T5887] [ 107.898784][ T5887] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 107.898796][ T5887] mutex_lock_nested+0x5a/0x1d0 [ 107.898809][ T5887] tcm_set_name+0x2b/0xd0 [ 107.898816][ T5887] function_make+0x1a8/0x360 [ 107.898825][ T5887] configfs_mkdir+0x4f6/0x9e0 [ 107.898835][ T5887] vfs_mkdir+0x408/0x620 [ 107.898846][ T5887] filename_mkdirat+0x289/0x520 [ 107.898857][ T5887] __se_sys_mkdir+0x34/0x150 [ 107.898868][ T5887] do_syscall_64+0x17b/0x530 [ 107.898876][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.898885][ T5887] [ 107.898885][ T5887] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 107.898898][ T5887] mutex_lock_nested+0x5a/0x1d0 [ 107.898909][ T5887] configfs_rmdir+0x553/0x950 [ 107.898918][ T5887] vfs_rmdir+0x3e9/0x6b0 [ 107.898934][ T5887] filename_rmdir+0x292/0x520 [ 107.898945][ T5887] __se_sys_rmdir+0x2e/0x140 [ 107.898956][ T5887] do_syscall_64+0x17b/0x530 [ 107.898964][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.898973][ T5887] [ 107.898973][ T5887] -> #0 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}: [ 107.898987][ T5887] __lock_acquire+0x15ff/0x2e40 [ 107.898995][ T5887] lock_acquire+0x115/0x350 [ 107.899008][ T5887] down_write+0x3a/0x50 [ 107.899017][ T5887] configfs_depend_item_unlocked+0x153/0x420 [ 107.899028][ T5887] usbg_make_tpg+0x1f6/0x590 [ 107.899040][ T5887] target_fabric_make_tpg+0xa8/0x6d0 [ 107.899050][ T5887] configfs_mkdir+0x4f6/0x9e0 [ 107.899059][ T5887] vfs_mkdir+0x408/0x620 [ 107.899070][ T5887] filename_mkdirat+0x289/0x520 [ 107.899081][ T5887] __se_sys_mkdir+0x34/0x150 [ 107.899091][ T5887] do_syscall_64+0x17b/0x530 [ 107.899099][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.899108][ T5887] [ 107.899108][ T5887] other info that might help us debug this: [ 107.899108][ T5887] [ 107.899111][ T5887] Chain exists of: [ 107.899111][ T5887] &sb->s_type->i_mutex_key#23 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 107.899111][ T5887] [ 107.899128][ T5887] Possible unsafe locking scenario: [ 107.899128][ T5887] [ 107.899131][ T5887] CPU0 CPU1 [ 107.899134][ T5887] ---- ---- [ 107.899137][ T5887] lock(&opts->dep_lock); [ 107.899143][ T5887] lock(gadget_subsys.su_mutex); [ 107.899149][ T5887] lock(&opts->dep_lock); [ 107.899156][ T5887] lock(&sb->s_type->i_mutex_key#23); [ 107.899164][ T5887] [ 107.899164][ T5887] *** DEADLOCK *** [ 107.899164][ T5887] [ 107.899166][ T5887] locks held by syz.0.18/5887: 5, last CPU#0: [ 107.899173][ T5887] #0: ffff88801e70a510 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 107.899199][ T5887] #1: ffff88803dd906e0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 107.899227][ T5887] #2: ffffffff8eea86e0 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b0/0x9e0 [ 107.899250][ T5887] #3: ffffffff8f1defd8 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf7/0x590 [ 107.899275][ T5887] #4: ffff888035079910 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590 [ 107.899300][ T5887] [ 107.899300][ T5887] stack backtrace: [ 107.899312][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.899323][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.899333][ T5887] Call Trace: [ 107.899337][ T5887] [ 107.899342][ T5887] dump_stack_lvl+0xe8/0x150 [ 107.899354][ T5887] print_circular_bug+0x2e2/0x300 [ 107.899366][ T5887] check_noncircular+0x12f/0x150 [ 107.899378][ T5887] __lock_acquire+0x15ff/0x2e40 [ 107.899391][ T5887] lock_acquire+0x115/0x350 [ 107.899405][ T5887] ? configfs_depend_item_unlocked+0x153/0x420 [ 107.899424][ T5887] down_write+0x3a/0x50 [ 107.899433][ T5887] ? configfs_depend_item_unlocked+0x153/0x420 [ 107.899444][ T5887] configfs_depend_item_unlocked+0x153/0x420 [ 107.899457][ T5887] usbg_make_tpg+0x1f6/0x590 [ 107.899471][ T5887] ? __pfx_usbg_make_tpg+0x10/0x10 [ 107.899485][ T5887] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.899495][ T5887] target_fabric_make_tpg+0xa8/0x6d0 [ 107.899505][ T5887] configfs_mkdir+0x4f6/0x9e0 [ 107.899516][ T5887] ? __pfx_current_check_access_path+0x10/0x10 [ 107.899528][ T5887] ? __pfx_configfs_mkdir+0x10/0x10 [ 107.899538][ T5887] ? generic_permission+0x2bf/0x670 [ 107.899549][ T5887] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 107.899563][ T5887] vfs_mkdir+0x408/0x620 [ 107.899575][ T5887] filename_mkdirat+0x289/0x520 [ 107.899588][ T5887] ? __pfx_filename_mkdirat+0x10/0x10 [ 107.899600][ T5887] ? strncpy_from_user+0x150/0x2c0 [ 107.899612][ T5887] ? do_getname+0x151/0x250 [ 107.899626][ T5887] __se_sys_mkdir+0x34/0x150 [ 107.899639][ T5887] do_syscall_64+0x17b/0x530 [ 107.899657][ T5887] ? irqentry_exit+0x10f/0x8f0 [ 107.899671][ T5887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.899687][ T5887] ? clear_bhb_loop+0x40/0x90 [ 107.899705][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.899721][ T5887] RIP: 0033:0x7f8d6e0fde99 [ 107.899740][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.899755][ T5887] RSP: 002b:00007ffe03f881c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 107.899772][ T5887] RAX: ffffffffffffffda RBX: 00007f8d6e385fa0 RCX: 00007f8d6e0fde99 [ 107.899786][ T5887] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 107.899797][ T5887] RBP: 00007f8d6e193eaf R08: 0000000000000000 R09: 0000000000000000 [ 107.899807][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.899817][ T5887] R13: 00007f8d6e385fac R14: 00007f8d6e385fa0 R15: 00007f8d6e385fa0 [ 107.899835][ T5887] 2026/07/27 06:19:05 executed programs: 62 2026/07/27 06:19:10 executed programs: 127